HP
Product
Hpux-ntp
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 2Low 0
Watch
Add Hpux-ntp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-6458 | 8.8 | Mar 27 | Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable Affected: before c.4.2.8.4.0 |
| CVE-2019-8936 | 7.5 | May 15 | NTP through 4.2.8p12 has a NULL Pointer Dereference Affected: before c.4.2.8.4.0 |
| CVE-2018-7185 | 7.5 | Mar 6 | The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp… Affected: before c.4.2.8.4.0 |
| CVE-2016-7434 | 7.5 | Jan 13 | The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query Affected: b.11.31 before c.4.2.8.2.0 |
| CVE-2016-7426 | 7.5 | Jan 13 | NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial… Affected: b.11.31 before c.4.2.8.2.0 |
| CVE-2016-9042 | 5.9 | Jun 4 | An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9 Affected: before c.4.2.8.4.0 |
| CVE-2018-7170 | 5.3 | Mar 6 | ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order… Affected: before c.4.2.8.4.0 |
Showing 7